diff options
| author | sils <sils@sils.li> | 2023-11-19 22:54:19 +0100 |
|---|---|---|
| committer | sils <sils@sils.li> | 2023-11-19 22:54:19 +0100 |
| commit | 0382d371c2998756326278c719a0d928209e1480 (patch) | |
| tree | e942be0ff818105cc3a53c4fa269b4ae48cde03a /secrets | |
| parent | feat(flake): add (r)agenix (diff) | |
| download | nix-config-0382d371c2998756326278c719a0d928209e1480.tar.gz nix-config-0382d371c2998756326278c719a0d928209e1480.zip | |
feat(treewide): use agenix for wifi-passwords
Diffstat (limited to 'secrets')
| -rw-r--r-- | secrets/default.nix | 7 | ||||
| -rw-r--r-- | secrets/secrets.nix | 10 | ||||
| -rw-r--r-- | secrets/wireless.age | 12 |
3 files changed, 29 insertions, 0 deletions
diff --git a/secrets/default.nix b/secrets/default.nix new file mode 100644 index 0000000..d737de7 --- /dev/null +++ b/secrets/default.nix @@ -0,0 +1,7 @@ +{...}: { + age.secrets = { + wireless = { + file = ./wireless.age; + }; + }; +} diff --git a/secrets/secrets.nix b/secrets/secrets.nix new file mode 100644 index 0000000..104e25b --- /dev/null +++ b/secrets/secrets.nix @@ -0,0 +1,10 @@ +let + sils = "age1vuhaey7kd9l76y6f9weeqmde3s4kjw38869ju6u3027yece2r3rqssjxst"; + thinklappi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGtOvWH5GgVhCAUsHTlKI/N2w7rK+uODMro0VZYWWdZJ root@thinklappi"; + allSecrets = [ + sils + thinklappi + ]; +in { + "wireless.age".publicKeys = allSecrets; +} diff --git a/secrets/wireless.age b/secrets/wireless.age new file mode 100644 index 0000000..b24ce17 --- /dev/null +++ b/secrets/wireless.age @@ -0,0 +1,12 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvR2xGVk03aHZrcHZOV0Jw +STl0SlByMXhKdDBlQXNyRTdnY3RGQ2NPZ2hFCnlXa3E5RGJTd1V6R3VLQzlYQmpo +a0tCZUd6VnRyZTFEcTRFc1NORk9mZ2MKLT4gc3NoLWVkMjU1MTkgL1BReS9BIGs1 +cGFkMGd0QzVsU0JPRTRhUG0vbWY2bXR4M0NQaktIZjZsQmpCUTcxVHMKMSs4VkxZ +UVYxT1hBcXBSNUlmc1FYR0NQNGpkN0JLVnZWMDNHdW4zS205MAotPiB5Y0NfNlxU +LWdyZWFzZSBUQ2NNYlRDbCBiQFsgeEsgVQptR05yL1BsYjc4MlJKSFY3MmhhSnhZ +SWJxN256djdlU01JY2pLS25Od2ZudEFhVQotLS0gQWRYZW9raGtCUEZ1czgwSVo2 +MDBoOEl5b0RUVnVieVFXR1I0OWRjL2NWMAoOWBXxJA9Bn+pQXWltE5cpHtE2YHP7 +17opbS05pkcCwXCCOH/7woPSlrFY+JgM61nUsvrXBujYTUbzJxXyXNODj4KpRICH +OOqMORMzVZ72D7127VCYRXpfoIMOacUIh1MT +-----END AGE ENCRYPTED FILE----- |